[Rule Proposal]: TG-EDGE-001 - Serverless and Edge Function Secret Leakage[Rule]

[githubmofo]

🛡️ Proposed Rule ID

TG-EDGE-001

📝 Summary of the Rule

Security guardrails for serverless and edge computing environments (e.g., Vercel Edge Functions, Cloudflare Workers, AWS Lambda).

⚠️ Why It Matters

In serverless runtimes:

1. Global variables and module-scoped memory can persist across warm invocations, accidentally leaking sensitive user state between requests.
2. In-memory secret caching on edge nodes can lead to credential exposure if execution context errors occur.

🎯 Proposed Scope & Guidance

• Applies to: Cloudflare Workers, Next.js Edge Runtime, AWS Lambda.
• Guidance: Enforce request-scoped state isolation and avoid global mutable variables for sensitive context.